CVE-2017-8589

CVE-2017-8589: vulnerability in Microsoft Windows 7 SP1, Windows Server 2008…

Published · Updated

Follow this CVE+ Monitor Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 26%
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".
Affected products
Microsoft Corporation · Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
Related CVEs — Microsoft Windows 7 SP1, Windows Server 2008…

In the same product, most dangerous first.

CVE-2017-8563—CVE-2017-8563EPSS 7.2%CVE-2017-8486—CVE-2017-8486EPSS 2.2%CVE-2017-8467—CVE-2017-8467EPSS 1.0%CVE-2017-8590—CVE-2017-8590EPSS 1.0%